Domain User Account Not Getting Local Administrator Rights
Why my domain administrator has no permissions and local admin has permissions.
Domain user account not getting local administrator rights. Behavior of the elevation prompt for administrators. Go to control panel user accounts go to manage user accounts then the advanced tab click on the advanced button in the middle of the form open the groups folder then double click on. To enable this account double click the administrator icon to open the properties dialog box. Otherwise a password will not be required for the domain administrator account.
From the local security settings console tree click local policies and then click security options. I m in an unusual predicament in that there is no account i can use to add local admin rights to a computer with the exception of the administrator account which is disabled. Repeat 1 3 for each desired windows computer. Loking threads checked things out.
Click start click accessories click run type secpol msc in the open box and then click ok. After the first time whenever a user launches the application using the shortcut you just created it will be launched with admin rights. Whoami groups fo list medium mandatory level i e. From the local users and groups snap in browse to groups double click on the administrators group locate your domain user account grant him her membership to the administrators group.
On server add domain sqlmanager local administrator group should have full rights on server. I removed readded machine domain incase of duplicate sid no dice. In the left pane expand local users and groups then open the users folder. Clear the account is disabled tick box then select apply to enable the account.
In fact if you open the windows credentials manager and navigate to windows credentials. Even domain user account member of local administrator group can able to manage the machine and only issue with the user member of domain admin group. On a new domain i m setting up i created a gpo to try make the logged in user and others a local admin by adding the domain group to the localcomputer administrators. Surprisingly no issue with the local admin account i can able to do all above work with local administrator account.
Win r lusrmgr msc. If the user named administrator has a down arrow on its icon it s been disabled. Scroll down to and double click user account control. So have sql server standard user account sqlmanager.